kstars -- exploitable set-user-ID application fliccd

A KDE Security Advisory explains: Overview KStars includes support for the Instrument Neutral Distributed Interface INDI. The build system of this extra 3rd party software contained an installation hook to install fliccd part of INDI as SUID root application. Erik Sjölund discovered that the code...

DSA-625-1 pcal - buffer overflows

Bulletin has no description...

CVE-2004-1017

Technical details (affected product/version, root cause, impact, remediation) are not publicly provided in the supplied documents. The CVE entry lacks concrete information here; monitor for updates.

CVE-2004-1017

Multiple "overflows" in the ioedgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors...

CVE-2004-1017

Multiple "overflows" in the ioedgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors...

CVE-2004-2710

Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to 1 sending certain typing statuses or 2 setting the chat room status bar to the current chat room name...

CVE-2004-0904

Integer overflow in the bitmap BMP decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows...

CVE-2004-1017

Multiple "overflows" in the ioedgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors...

DEBIAN-CVE-2004-1773

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via 1 long output from wc to shar, or 2 unknown vectors in unshar...

DEBIAN-CVE-2004-1186

Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service application crash...

DEBIAN-CVE-2004-2167

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via 1 the expandmacro function, and possibly 2 Environments and 3 TranslateCommand...

CVE-2004-1017: Undefined Security Weakness

Multiple "overflows" in the ioedgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors...

USN-53-1: imlib vulnerabilities

Pavel Kankovsky discovered several buffer overflows in imlib. If an attacker tricked a user into loading a malicious image, he could exploit this to execute arbitrary code in the context of the user opening the image...

Debian DSA-618-1 : imlib - buffer overflows, integer overflows

Pavel Kankovsky discovered that several overflows found in the libXpm library were also present in imlib, an imaging library for X and X11. An attacker could create a carefully crafted image file in such a way that it could cause an application linked with imlib to execute arbitrary code when the...

[SECURITY] [DSA 618-1] New imlib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 618-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2004 http://www.debian.org/security/faq -...

Multiple Orcale bugs

Buffer overflows, DoS, SQL injections, etc...

CVE-2004-0803

Multiple vulnerabilities in the RLE run length encoding decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files...

Mandrake Linux Security Advisory : mplayer (MDKSA-2004:157)

A number of vulnerabilities were discovered in the MPlayer program by iDEFENSE, Ariel Berkman, and the MPlayer development team. These vulnerabilities include potential heap overflows in Real RTSP and pnm streaming code, stack overflows in MMST streaming code, and multiple buffer overflows in the...

Fedora Core 3 : php-4.3.10-3.2 (2004-568)

Tue Dec 21 2004 Joe Orton 4.3.10-3.2 - fix umask patch 143286 - Wed Dec 15 2004 Joe Orton 4.3.10-3.1 - update to 4.3.10, including security fixes 141135 : - unserializer integer overflows, CVE-2004-1019 - exif image parsing overflow, CVE-2004-1065 Note that Tenable Network Security has extracted...

CVE-2004-1289

CVE-2004-1289 affects pcal 4.7.1, where multiple buffer overflows in (1) getline in pcalutil.c and (2) get_holiday in readfile.c allow remote attackers to execute arbitrary code via a crafted calendar file. The vulnerability has a CVSS v2 base score of 10.0 (HIGH). Public advisories (e.g., Debian...